Security Directory

I

InCrowd

incrowdsports.com

68

InCrowd is a specialized digital sports marketing consultancy offering advisory and implementation services focused on data, content, digital platforms, and inventory management. The company targets sports organizations and brands seeking to enhance fan engagement and commercial value through digital transformation. Their website demonstrates a strong market position with a portfolio of high-profile clients and case studies, supported by professional multimedia content and client testimonials. Technically, the website is built on the Webflow CMS platform, leveraging modern analytics tools such as Google Analytics, Snowplow, and Microsoft Clarity, alongside a robust consent management system (Sourcepoint) to ensure GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates privacy and consent frameworks. However, there is a lack of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and branding strongly indicate a legitimate business. Overall, InCrowd presents a professional and trustworthy digital presence with minor gaps in transparency around security policies and domain registration. Strategic recommendations include enhancing security documentation, publishing incident response details, and verifying domain registration to strengthen trust and compliance.

P

PRONACHEM spol. s r.o.

prohopo.cz

50

PROHOPO.cz is an established Czech e-commerce retailer specializing in agricultural and farming supplies, including seeds, fertilizers, tools, and animal care products. The company operates with a strong market presence since 2000, offering 95% of products in stock and multiple pickup locations across the Czech Republic. Their business model focuses on serving farmers, gardeners, and agricultural professionals with a comprehensive product range and customer support. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and various JavaScript libraries to enhance user experience and marketing effectiveness. The site is mobile-optimized and provides clear navigation and product information. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies, which could be improved. The absence of WHOIS data reduces domain trust slightly, but the overall professional presentation and contact transparency mitigate concerns. Strategic recommendations include enhancing security headers, publishing incident response information, and monitoring domain registration status to maintain trust.

Telšių žinios is a Lithuanian regional news media outlet focused on providing local news, cultural content, and community information for the Telšiai county area. Established in 2003, it operates a professional WordPress-based website featuring diverse news categories, video content, and subscription services. The site targets Lithuanian-speaking residents and stakeholders interested in regional affairs. Technically, the website employs a modern CMS with SEO and accessibility plugins, Google Fonts, and Google Analytics for tracking. Advertising is managed primarily through Google Ad Manager and DoubleClick. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms interfere with content accessibility, and the domain registration aligns well with the business profile, supporting legitimacy. Overall, the website is professionally designed, well-structured, and trustworthy, though privacy compliance needs enhancement.

A

Atlas předsudků

atlaspredsudku.cz

39

Atlas předsudků is a Czech Republic based educational and informational website focused on debunking prejudices and misinformation about foreigners and integration within the country. The site is funded by the European Union and the Czech Ministry of Interior, positioning it as a government-backed public awareness campaign. It offers interactive quizzes, detailed factual content, and multimedia resources to educate the general public on migration and integration topics. The target audience is the Czech general public interested in social issues and combating misinformation. Technically, the website uses modern web technologies including Bootstrap 5 and Google Analytics, with a cookie consent mechanism that respects user privacy by default denying ad and analytics cookies. The site is hosted on a Czech hosting provider and uses a domain registered in 2020, consistent with its recent campaign nature. Security posture is moderate with room for improvement in security headers and incident response transparency. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional, trustworthy, and serves an important social function with good content quality and user experience.

C

Centrum Czech in

centrumczechin.cz

37

Centrum Czech in is a small educational organization based in the Czech Republic specializing in Czech language courses for adults and children. The website is professionally designed using WordPress with modern SEO practices and social media integration. The technical infrastructure includes common plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively but should improve compliance and security transparency.

B

Brothers Wines s.r.o.

brotherswines.cz

50

Brothers Wines s.r.o. operates a professional e-commerce platform specializing in the sale of wines, including red, white, rosé, and curated wine packages. The website targets wine consumers primarily in Czechia and offers features such as customer accounts, wishlists, and email alerts for stock availability. The company displays multiple wine-related certifications and awards, enhancing its market credibility. Technically, the site is built on the PrestaShop platform, leveraging modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Smartlook. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers are not detected. Privacy policies and cookie usage statements are comprehensive and GDPR compliant. However, the absence of WHOIS data limits domain registration transparency and trust assessment. Overall, the site is suitable for adult audiences due to alcohol sales and includes age verification. The business is small-sized, focused on retail within the Czech market.

The website www.ferovamigracnipolitika.cz represents a Czech non-profit organization focused on advocating for fair migration policies, integration, and human rights of migrants and refugees. The site is content-rich, regularly updated, and targets migrants, NGOs, policymakers, and the general public interested in migration issues. Technically, it is built on WordPress with standard plugins and Google Analytics integration, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the professional presentation and content quality suggest legitimacy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is safe, professional, and informative but could improve in privacy compliance and security transparency.

B

BRND WGN

brndwgn.com

73

BRND WGN is a Malta-based brand-led creative agency specializing in delivering engaging and meaningful brand experiences. Established in 2006, the company positions itself as a leading creative design agency in its market. The website reflects a professional digital presence built on modern technologies such as Webflow, Cloudflare DNS, Google Tag Manager, and Cookiebot for cookie consent management. The technical infrastructure supports a moderate performance level with good mobile optimization and SEO practices. Security measures include HTTPS, reCAPTCHA integration, and cookie consent, though additional security headers and explicit privacy and security policies are absent. The domain's WHOIS data confirms a long-standing registration consistent with the business claims, enhancing trustworthiness. Overall, the website presents a credible and professional image but would benefit from enhanced privacy compliance and security documentation.

C

Ceramic Roadmap 2050

ceramicroadmap2050.eu

44

Ceramic Roadmap 2050 is an industry-focused website representing the European ceramic sector's leadership in production and innovation. It provides a comprehensive roadmap towards climate neutrality by 2050, emphasizing sustainability, energy efficiency, circular economy, and ecosystem preservation. The website targets industry stakeholders, policymakers, and researchers, offering educational content and downloadable resources. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies including jQuery, Slider Revolution, and Google Analytics. The security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy, though it would benefit from enhanced privacy compliance and clearer contact information.

Pro Map Tools is a small technology company specializing in paid geospatial and mapping APIs, offering both worldwide and country-specific services. Their business model focuses on providing RESTful APIs for developers and clients requiring geospatial data and bespoke mapping solutions. The website is professionally designed with clear content and navigation, targeting developers and businesses in need of location-based services. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics for tracking. The API endpoints are secured via HTTPS and require authentication keys, indicating a basic level of security in service delivery. However, the website lacks visible security headers and published privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are provided, limiting direct communication channels. The site does not show evidence of formal security policies or incident response contacts. Overall, while the site is functional and professional, it requires improvements in transparency, security headers, and compliance documentation. The overall risk is moderate due to missing WHOIS data and lack of privacy policies, but no immediate vulnerabilities or malicious content were detected. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, providing clear contact information, and verifying domain registration details to enhance trust and compliance.

M

MEDIA HOME BRNO

meho.cz

58

MEDIA HOME BRNO is a small Czech Republic based web and graphic design studio established in 2015. The company offers a range of services including web design, UX/UI design, branding, copywriting, SEO, and social media management, targeting businesses and individuals seeking professional digital presence. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, the site uses modern web technologies including jQuery, Swiper.js, Google Fonts, and integrates Google Analytics with a compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and cookie consent properly managed, though security headers and formal security policies are absent. Contact information is clearly provided, enhancing business credibility. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the site is safe, trustworthy, and well-positioned for its market niche.

W

WONDER WEB spol. s r.o.

wonderweb.cz

41

WONDER WEB spol. s r.o. is a Czech-based advertising and digital agency providing a comprehensive suite of marketing and digital services including custom web development, e-commerce solutions, graphic design, advertising campaigns, server hosting, and legal services such as trademark registration. The company positions itself as a full-service partner for businesses seeking to enhance their digital presence and marketing effectiveness. The website is professionally designed with clear navigation and multimedia client references, targeting business clients primarily in the Czech Republic. Technically, the site uses a custom CMS and modern JavaScript libraries, integrating Google Analytics and Facebook SDK for marketing and tracking purposes. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and privacy policy documentation. WHOIS data is unavailable, which limits domain trust assessment. Overall, the website is functional and business-focused but could improve transparency and security practices.

Č

Česká asociace streetwork, z.s

streetwork.cz

52

Česká asociace streetwork, z.s is a well-established Czech non-profit organization dedicated to streetwork and low-threshold social services. Founded in 2006, it serves as a central association providing education, campaigns, networking, and resources to social workers and related stakeholders. The website reflects a professional and consistent brand presence with comprehensive content relevant to its mission and audience. Technically, the site uses modern web technologies including jQuery, Livewire, and Lightbox, hosted by Active24, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced security headers and policies are not explicitly published. Overall, the website is trustworthy, safe, and compliant with basic privacy standards, though it lacks explicit privacy and security policy pages. Strategic improvements could focus on enhancing security transparency and formalizing privacy documentation.

S

Swisspearl

swisspearl.com

61

Swisspearl is a Swiss-based manufacturer specializing in premium fiber cement products for building facades, roofs, interior cladding, and garden elements. The company positions itself as a leader in sustainable and innovative building materials with a heritage of over 100 years. Their website targets architects, designers, and contractors, offering detailed product information, consultation services, and sample ordering. The site is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital presence. Technically, the website employs multiple third-party marketing and analytics tools, including Google Tag Manager, Usercentrics for consent management, and visitor tracking services like TruConversion and RevealID. While HTTPS is used, explicit security headers and privacy policies are not clearly present in the provided content, indicating room for improvement in security posture and privacy compliance. The WHOIS data is unavailable or inconsistent, which raises some concerns about domain transparency but does not directly contradict the professional nature of the website. Overall, Swisspearl's digital infrastructure supports its business goals effectively but would benefit from enhanced privacy disclosures and security best practices.

A

ambitas.org

ambitas.org

46

ambitas.org is a specialized technology company focused on delivering custom engineering, IoT, and vertical farming solutions. Their business model centers on B2B engagements, providing tailored hardware and software development from concept through completion. The website showcases multiple case studies and client testimonials, positioning the company as an innovative niche player in the vertical farming and IoT sectors. Technically, the site leverages modern frontend technologies such as React and FontAwesome Pro, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is moderate; HTTPS is implied but no explicit security headers or vulnerability disclosures are present. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small tech firms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

I

I Sentieri del Pollino

isentieridelpollino.it

46

I Sentieri del Pollino is a small, specialized website dedicated to promoting the Parco Nazionale del Pollino, Italy's largest protected natural area. The site targets outdoor enthusiasts, hikers, and tourists interested in nature, trekking, and cultural heritage in the Calabria and Basilicata regions. It offers rich content including detailed information on trails, natural attractions, sporting activities, and cultural sites, supported by a consistent and professional design. The business model appears to be informational and promotional, with monetization through Google Adsense advertising and community engagement via social media channels. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, Google Fonts for typography, and Google Analytics for visitor tracking. The site is well-optimized for SEO with appropriate meta tags and structured data (JSON-LD) describing the organization. Performance is moderate with good mobile optimization and basic accessibility features. Security is robust with HTTPS enforced and no visible vulnerabilities, though additional security headers and formal security policies could enhance posture. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. However, no explicit incident response or vulnerability disclosure policies are present. Contact information is limited to a verified company email, with no phone or physical address listed. The domain WHOIS data aligns well with the website's purpose and geographic focus, enhancing trust. Overall, the website presents a trustworthy, informative, and user-friendly resource for visitors interested in the Pollino National Park, with solid technical and security foundations but room for improvement in formal security and incident response documentation.

A

Association for Financial Markets in Europe (AFME)

afme.eu

75

The Association for Financial Markets in Europe (AFME) is a prominent trade association representing over 150 leading global and European banks and market participants. It serves as the voice of these institutions in Europe’s financial markets, focusing on advocacy, policy development, research, and events. The organization plays a critical role in underwriting a significant portion of European corporate and sovereign debt as well as equity issuances, positioning itself as a key influencer in the financial ecosystem. The website reflects this stature with professional design, comprehensive content, and clear navigation tailored to financial professionals and regulators. Technically, the website is built using modern technologies such as React and Umbraco CMS, with integrations for cookie consent (Cookiebot) and analytics (Google Analytics). The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed, including HTTPS enforcement and appropriate security headers, although some security policy and incident response information could be more transparent. From a security perspective, the site demonstrates a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned cookie consent and privacy policies. However, the lack of publicly available WHOIS data due to privacy protection limits domain registration transparency. Despite this, the website’s content quality, trust signals, and industry alignment support its legitimacy. Overall, AFME’s website is a well-constructed, secure, and professional platform that effectively supports its role as a leading financial markets association in Europe. Strategic recommendations include enhancing public security policy disclosures, incident response contacts, and vulnerability disclosure mechanisms to further strengthen trust and compliance.

The Charities Aid Foundation (CAF) operates a professional and comprehensive website focused on facilitating impactful charitable giving for individuals, corporations, and charities. The organization positions itself as a leading non-profit entity in the UK, offering a range of services including personal giving solutions, corporate philanthropy, and support for charitable organizations. The website content is well-structured, with clear navigation and rich resources aimed at donors and charities alike. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The use of Sitefinity CMS suggests a robust content management system supporting the site. Performance and mobile optimization are good, with accessibility and SEO best practices largely observed. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms, reflecting compliance with privacy regulations such as GDPR. However, explicit security headers and incident response policies are not clearly published, representing an area for improvement. No vulnerabilities or suspicious elements were detected in the visible content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a large non-profit organization. The absence of WHOIS data due to privacy protection does not detract from the legitimacy, given the strong trust signals and comprehensive content. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure program to further strengthen trust and security posture.

The website akceahr.cz represents the Asociace hotelů a restaurací (AHR), a Czech hospitality association organizing industry events such as conferences and roadshows. The site is well-structured, targeting hospitality professionals and partners, with clear event information and testimonials that reinforce its market position. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and a cookie consent manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

S

Spolu pro rodinu, z.s.

spoluprorodinu.cz

41

Spolu pro rodinu, z.s. is a registered non-profit association based in the Czech Republic focused on improving the situation of families through social services, legal protection programs for children, and support for foster care. The organization operates regionally with a clear mission to assist families and institutions that support them. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience of families and social service beneficiaries. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA v3 and tracking via Google Analytics and Facebook Pixel. While the site uses HTTPS and asynchronous script loading for performance, it lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. Contact information is primarily a physical address and a contact form, with no direct emails or phone numbers listed. Overall, the website is functional, secure at a basic level, and credible but would benefit from enhanced privacy compliance and security hardening.

B

BONVER WIN a.s.

bonver.cz

61

BONVER WIN a.s. operates as the largest Video Lottery Terminal (VLT) operator in the Czech Republic, providing both physical casino and club venues across the country as well as an online casino platform. The website presents a professional and consistent brand image with clear navigation and adult-targeted gambling content, including jackpot information and loyalty programs. The company targets adult users with an age verification mechanism and cookie consent banner, reflecting compliance with basic regulatory requirements. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service pages reduce transparency and trustworthiness. Security posture is moderate with HTTPS enforced but missing security headers and no visible vulnerability disclosure or incident response information. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

A

Asociace sklářského a keramického průmyslu ČR

askpcr.cz

51

Asociace sklářského a keramického průmyslu ČR is a well-established Czech industry association representing manufacturers and stakeholders in the glass, ceramics, and porcelain sectors. Founded in 1990 with a domain registered since 2000, it serves as a key advocate and collaborative platform for its members, offering services such as collective bargaining, industry news, publications, and educational support. The website reflects a professional and consistent brand presence targeting industry professionals, educational institutions, and partners within the Czech Republic. Technically, the site uses a custom CMS with jQuery, Google Maps API, and Google Analytics, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and terms of service pages and security headers. Overall, the site is trustworthy and credible with clear contact information and social media presence.

D

DEVINBAND

devin.band

61

DEVINBAND is a collective of independent communication and technology companies specializing in marketing, advertising, consulting, and software development. The group operates globally with a footprint in 36 countries and employs over 120 professionals. Their portfolio includes award-winning agencies and innovative SaaS products, positioning them as a significant player in the marketing technology sector. The website reflects a professional and consistent brand image, highlighting their integrated approach to strategy, creativity, consulting, and technology innovation. Technically, the website employs modern web technologies including Google Analytics for tracking and Photoswipe for image galleries. The site is mobile-optimized and demonstrates good SEO practices. However, some technical improvements such as enhanced security headers and a visible privacy policy could strengthen their digital maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. The absence of visible security headers and lack of explicit privacy and terms of service pages are areas for improvement. WHOIS data is privacy protected, which is reasonable for this business type but limits transparency. Overall, DEVINBAND presents a trustworthy and professional online presence with moderate technical and security posture. Strategic enhancements in privacy disclosures and security configurations are recommended to elevate compliance and trustworthiness.

G

Google

googleblog.com

70

The Keyword is Google's official blog providing the latest news and stories about Google products, technology, and innovation. It serves as a corporate communication platform targeting a broad audience including technology enthusiasts, developers, and users of Google products. The site is well-branded, professionally designed, and hosted on Google's own infrastructure, ensuring high performance and reliability. The technical stack includes Google Tag Manager and Google Analytics for tracking, with modern web standards and mobile optimization implemented. Security posture is strong with HTTPS enforced and appropriate security headers present, though explicit privacy and cookie policies are not found in the provided content. No contact or incident response information is available, which could be improved for transparency and compliance. Overall, the site is trustworthy, safe, and professionally maintained, reflecting Google's enterprise-level standards.

T

Tlačová agentúra Slovenskej republiky (TASR)

webmagazin.sk

50

Webmagazin.Teraz.sk is an online news and lifestyle portal operated by the Slovak national news agency TASR. It provides a broad range of content including news, business, culture, health, and entertainment primarily targeting Slovak-speaking audiences. The site is supported by advertising and integrates multiple third-party ad and tracking services with GDPR-compliant consent management. The business is well-established with consistent branding and clear contact information, reinforcing its credibility in the Slovak media market. Technically, the site uses a mix of older and modern web technologies including jQuery, Facebook SDK, and Google Analytics, with a CMS named Malina. While the site is accessible and performs moderately well, some technical debt is evident due to outdated libraries. Security posture is generally good with HTTPS and cookie consent, but lacks published security policies and advanced security headers. Overall, the site is safe, professional, and trustworthy with room for technical and security improvements.

A

ambitas.org

ambitas.sk

46

ambitas.org is a specialized technology company focused on delivering tailored engineering, vertical farming, and IoT solutions. Since 2009, they have developed custom hardware and software solutions, serving a niche market with innovative agricultural and industrial IoT applications. Their website showcases multiple case studies and client testimonials, indicating a client-focused approach and a growing portfolio in vertical farming and smart ecosystems. Technically, the website uses modern frameworks such as React and integrates professional tools like FontAwesome Pro and Google Analytics, reflecting a mature digital presence. However, the absence of explicit privacy, cookie, and terms of service policies, along with missing contact details, suggests areas for improvement in compliance and transparency. The security posture is moderate but lacks visible security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

P

Online platby - Moduly a pluginy do e-shopů, knihovny, platební aplikace

platiti.cz

49

Platiti.cz is a Czech-based provider specializing in payment modules, plugins, and standalone payment applications designed for e-commerce platforms. Their offerings include integration libraries for developers and support for a wide range of popular e-shop systems such as PrestaShop, WooCommerce, Magento, and others. The company targets e-shop owners and developers seeking reliable payment gateway solutions, positioning itself as a comprehensive service provider in the online payment integration market. The website content is professional and well-structured, featuring detailed catalogs and customer testimonials that enhance credibility. From a technical perspective, the website employs standard web technologies including HTML5, Bootstrap CSS framework, and jQuery 1.11.1, along with Google Fonts and Google Analytics for tracking. While the site is mobile responsive to a basic degree and SEO optimized, some technical improvements are recommended, such as updating outdated JavaScript libraries and enhancing accessibility features. The website does not appear to use a CMS, and hosting details are not disclosed. Security posture is moderate; HTTPS usage is assumed but not explicitly confirmed in the data. No security headers were detected, and the site lacks visible privacy and cookie policies, which are critical for GDPR compliance. The absence of WHOIS data limits domain legitimacy verification, although the site provides clear contact information and customer testimonials, which support trustworthiness. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, Platiti.cz presents a solid business offering with room for improvement in security and privacy compliance. Strategic enhancements in these areas would strengthen their market position and customer trust.

V

Vitana

vitana.cz

50

Vitana.cz is a well-established Czech website offering a wide range of food products, primarily spices, seasonings, sauces, and soups, along with recipe content to inspire consumers. The brand has a strong market presence in the Czech Republic, supported by a domain registered since 1997 and active social media channels. The website is professionally designed with good content quality and consistent branding, targeting general consumers interested in cooking and food preparation. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics with IP anonymization, Hotjar for user behavior analytics, and Facebook Pixel for marketing. Cookie consent is managed via CookieYes, indicating a basic level of privacy compliance. The site is mobile-optimized and uses responsive design, though no explicit CMS or hosting provider details are evident. From a security perspective, the website uses HTTPS and implements some privacy features such as anonymized analytics and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no visible security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is good but could be improved with additional headers and published policies. The website content is safe for general audiences, focusing on food and recipes without any adult or explicit material. No WAF or blocking mechanisms were detected, allowing full content access. The WHOIS data confirms the domain's legitimacy and consistency with the brand's history. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection.

M

Měšťanský pivovar v Poličce, a.s.

pivovar-policka.cz

46

Měšťanský pivovar v Poličce, a.s. is a Czech brewery specializing in the production and sale of various traditional beer types, including light and dark beers, strong beers, and non-alcoholic options. The company also engages in sustainable energy initiatives such as photovoltaic systems. The website targets local consumers and business partners, providing detailed product information, employment opportunities, and contact details primarily via phone. The digital infrastructure includes modern analytics tools like Google Tag Manager and TikTok pixels, indicating a moderate level of digital maturity. Security measures include an age verification gate to comply with alcohol sales regulations, but lack explicit privacy policies and security headers, which are areas for improvement. The absence of WHOIS data reduces transparency and trust, though the website content and business presentation appear professional and consistent with a medium-sized manufacturing entity.

Domy-Domy.cz is a Czech language content website focused on providing inspiration, advice, and tips for family house construction, modern architecture, and comfortable rural living. The site targets individuals interested in building or improving family homes, offering a range of articles authored by Jan Novák. The business model appears to be content publishing monetized through affiliate marketing and advertising partnerships. The website uses modern frontend technologies including Bootstrap and Google Analytics, hosted likely via the WEDOS provider. The site is mobile optimized with good SEO practices and a clear navigation structure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data shows an unusual domain creation date in the future, which raises questions about domain legitimacy, though the site content is professional and consistent. Overall, the site scores a 72 out of 100 in AI evaluation, indicating a good but improvable digital presence.

V

virtual-zoom s.r.o.

cigarclub.cz

46

Cohiba Atmosphere Bar is a niche hospitality business operating a private cigar club and cocktail bar located in Prague, Czechia. It targets mature adults interested in premium cigars and cocktails, positioning itself as an upscale venue with a membership model. The website content is well-structured and professionally presented, featuring integration with TripAdvisor and social media platforms to enhance trust and customer engagement. However, the business lacks publicly available detailed company registration information and WHOIS data, which slightly reduces overall credibility. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.9, which are outdated and pose security risks. The site uses Google Analytics and Google reCAPTCHA for analytics and bot protection, respectively, and implements a cookie consent banner indicating some privacy awareness. Mobile optimization and accessibility are basic but functional. Security headers are not evident from the provided data, and no advanced security policies or incident response information is published. The security posture is moderate with HTTPS enabled and some security best practices observed, but the use of outdated libraries and missing security headers are notable vulnerabilities. Privacy compliance is basic with a privacy policy and cookie banner present but lacking comprehensive GDPR indicators. Business credibility is supported by clear contact information, social media presence, and partner affiliations, though the absence of WHOIS data and domain registration details is a concern. Overall, the website scores moderately in content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements in updating technical components, enhancing security headers, and publishing detailed compliance and incident response policies would significantly improve trust and security posture.

V

VML

vml.com

67

VML is a global digital marketing and technology agency operating under the parent company WPP. The company offers a broad range of services including brand experience, commerce, consulting, customer experience, and technology transformation. The website reflects a mature enterprise with a strong market position and a focus on innovation and growth. Technically, the site employs modern analytics and consent management tools, ensuring GDPR-aligned user tracking. Security posture is good with HTTPS and consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and parent company association.

J

JEŽ – kamenické práce, spol. s r.o.

janjez.cz

59

JEŽ – kamenické práce, spol. s r.o. is a Czech-based company specializing in high-end stone masonry services including project design, production, installation, and restoration. The company targets clients seeking luxury stonework solutions both domestically and internationally. Their market position is that of a premium service provider emphasizing quality and customer satisfaction. The website reflects a professional and well-branded digital presence with clear service offerings and client engagement features such as a client center and gallery. Technically, the site uses modern JavaScript libraries like jQuery, Swiper, and Fancybox, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no privacy policy or terms of service pages are published. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy but would benefit from improved compliance documentation and security headers.

Z

Zotabox

zotabox.com

64

Zotabox operates as a SaaS platform providing over 20 marketing tools aimed at e-commerce businesses to increase sales and subscriber counts. The website info.zotabox.com serves as a marketing landing page showcasing features such as popups, header bars, notification boxes, contact form builders, and social media integrations. The company positions itself as trusted by over 10,000 e-commerce businesses with a strong customer review base. Technically, the site is built on WordPress with Bootstrap and integrates multiple modern JavaScript libraries and tracking services including Google Analytics, Facebook Pixel, Microsoft Clarity, and Crisp Chat. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is basic with privacy and cookie policies present and cookie consent mechanisms implemented. The WHOIS data for the subdomain is unavailable, which is typical, but the overall domain ecosystem and branding indicate legitimacy. Overall, the site is professional, well-structured, and targets e-commerce merchants seeking marketing enhancement tools.

F

Forbes

forbes.sk

57

Forbes Slovakia operates as a leading Slovak business and success magazine, delivering high-quality content focused on business, economy, and wealth. The website offers subscription services, newsletters, and events, targeting professionals and business enthusiasts in Slovakia. The brand is well-established with consistent branding and a professional online presence. Technically, the site is built on WordPress with modern technologies including React components, Tailwind CSS, and integrates Google Tag Manager and Google Analytics for marketing and analytics. Cookie consent is managed via Cookiebot, supporting GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The site lacks explicit privacy policy and terms of service links in the provided content, which is a compliance gap. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy transparency and security header implementation.

A

Asociace českých nábytkářů

czechfurniture.com

49

The website www.czechfurniture.com serves as the official online presence of the Asociace českých nábytkářů (Association of Czech Furniture Makers). It provides industry news, articles, and information about member companies, focusing on promoting quality Czech furniture manufacturing. The site targets industry professionals, manufacturers, and stakeholders interested in Czech furniture craftsmanship and innovation. Technically, the site employs modern web technologies including Google Analytics, Google reCAPTCHA, and uses HTTPS with good security practices, although it lacks some security headers and explicit privacy/cookie policies. The WHOIS data for the domain is unavailable, which is inconsistent with the active and professional nature of the website, slightly reducing trustworthiness. Overall, the site is well-structured, content-rich, and safe for general audiences, but could improve transparency and compliance by publishing privacy and cookie policies and providing clearer contact information.

S

Studio Joch

joch.cz

63

Studio Joch is a small Czech graphic design studio specializing in creating comprehensive visual identities for businesses and their products. Their services include logo design, print materials, website design, and commercial space branding, targeting local businesses seeking cohesive branding solutions. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics and Solidpixels CMS. Privacy and cookie policies are implemented with user consent mechanisms, reflecting good privacy compliance. However, the absence of WHOIS registration data and lack of explicit contact information on the site reduce overall business credibility and trustworthiness. Security posture is solid with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is functional, secure, and professional but would benefit from enhanced transparency and domain legitimacy verification.

S

Stichting ZDHC Foundation

implementation-hub.org

57

The Implementation Hub website represents a non-profit organization, Stichting ZDHC Foundation, dedicated to advancing sustainable chemical management in the fashion, apparel, and leather industries. The site serves as a central platform offering training, approved providers, and digital tools to support the Roadmap to Zero program. It targets industry stakeholders seeking to improve chemical safety and environmental impact. Technically, the site is built on Webflow CMS with modern JavaScript libraries and integrates analytics tools such as Matomo and Google Analytics. The website is mobile-optimized and presents a professional design with clear navigation. Security posture is strong with HTTPS enforced and secure forms, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data is privacy protected, but domain expiry and content consistency support legitimacy. Overall, the site is trustworthy and well-positioned in its niche.

B

Balonkar CZ s.r.o.

balonkar.cz

46

Balonkar CZ s.r.o., led by Tomáš Okurek, is a specialized entertainment service provider in the Czech Republic focusing on balloon art, face painting, and event decorations. The company has established a strong market presence with notable balloon exhibitions and celebrity clientele, positioning itself as a key player in the niche balloon entertainment industry. The website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the site is built on WordPress with modern plugins and themes, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and formal policies are recommended. Overall, the business demonstrates credibility and trustworthiness with transparent contact information and charity involvement.

M

Mesto Nitra

nitra.sk

49

The website nitra.sk serves as the official digital presence of the city of Nitra, Slovakia. It provides comprehensive information about municipal governance, public services, cultural events, urban planning, and social programs. The site targets residents, visitors, and local businesses, offering a broad range of services and resources relevant to city life. The business model is that of a public sector municipal service provider, positioning itself as the authoritative source for city-related information and services. Technically, the website is built on WordPress 6.0.11 with modern plugins such as Yoast SEO and Kadence Blocks, ensuring good SEO and content management capabilities. The site uses HTTPS with strong security headers and integrates Google Analytics for minimal user tracking. Mobile optimization and accessibility are well addressed, providing a positive user experience across devices. From a security perspective, the site demonstrates a solid posture with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly available security policy and vulnerability disclosure program, which are recommended for transparency and incident readiness. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a designated Data Protection Officer contact. Overall, the website is trustworthy, professional, and well-maintained, reflecting the credibility expected from a government entity. Strategic recommendations include publishing a formal security policy, establishing a vulnerability disclosure channel, and enhancing incident response transparency to further strengthen security and trust.

B

Bratislavskykraj.sk

bratislavskykraj.sk

41

Bratislavskykraj.sk serves as the official information portal for the Bratislava self-governing region in Slovakia, providing residents and visitors with timely updates on regional news, healthcare, culture, social services, and environmental matters. The website leverages WordPress CMS with a suite of plugins to enhance SEO, security, and user engagement, including GDPR-compliant cookie consent mechanisms and push notifications. The portal maintains a professional and consistent brand presence aligned with its governmental role. Technically, the site employs modern web technologies and frameworks, including Yoast SEO for search optimization, Wordfence for security, and OneSignal for push notifications. The site is mobile-optimized and performs moderately well, with good accessibility and SEO practices. Security measures are robust, featuring HTTPS enforcement and multiple security headers, though there is room for improvement in incident response transparency and vulnerability disclosure. From a security perspective, the portal demonstrates strong adherence to best practices, including GDPR compliance and secure form handling. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests opportunities to enhance trust and preparedness. Overall, the site is trustworthy, professionally maintained, and suitable for its public service mission. The overall risk assessment is low, with recommendations focusing on expanding security documentation, improving accessibility, and maintaining up-to-date software to mitigate emerging threats. Strategic enhancements in transparency and user communication will further solidify the portal's credibility and security posture.

K

KONSTRUKCE Media, s.r.o.

portalsvetlo.cz

54

The website portalsvetlo.cz represents a specialized Czech media company KONSTRUKCE Media, s.r.o., publishing the quarterly magazine Světlo focused on lighting technology and related fields. The site targets professionals, enthusiasts, and students in lighting, architecture, and research sectors, offering articles, podcasts, event calendars, and subscription services. The business model centers on content publication, advertising, and subscriptions, positioning itself as a niche industry leader in the Czech Republic. Technically, the website employs modern web technologies including jQuery, Google Fonts, and Google Analytics, with content delivered over HTTPS and some use of CDN services. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security posture is moderate with no visible security headers and no explicit incident response or vulnerability disclosure information. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS data and security headers suggests room for improvement. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is professional and complete, enhancing business credibility. Overall, the website is a well-maintained professional media platform with moderate technical maturity and security posture. The lack of WHOIS data is a concern but does not outweigh the positive trust signals from content and contact transparency. Strategic improvements in security headers, incident response visibility, and WHOIS transparency would enhance trust and compliance.

P

Penzion Bejčkův mlýn

bejckuvmlyn.cz

55

Penzion Bejčkův mlýn is a small hospitality business located in the Česká Kanada natural park near Slavonice, Czech Republic. The company offers accommodation, a restaurant serving Czech cuisine, a wine cellar experience, and a domestic zoo, targeting tourists and visitors seeking nature and leisure. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Analytics for minimal user tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The domain is well-established since 2003, consistent with the business history, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional online presence for a local hospitality provider.

V

VML

labstore.cz

67

VML is a globally recognized creative agency operating in the Czech Republic, formed from the merger of Wunderman Thompson and VMLY&R. It offers a comprehensive suite of services including creative campaigns, customer experience management, scalable content production, technology and AI integration, and data privacy governance. The company is positioned as the largest agency in the Czech market with a strong global network supported by its parent company WPP. Technically, the website employs modern web technologies such as Google Analytics, OneTrust for cookie consent, and Cloudinary for media delivery, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response policies are recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data transparency slightly impacts domain trustworthiness.

B

BurdaMedia Extra s.r.o.

extra.cz

60

eXtra.cz is a Czech lifestyle and celebrity news website operated by BurdaMedia Extra s.r.o. It offers a wide range of content including celebrity news, horoscopes, and general lifestyle articles targeting a general adult audience interested in entertainment and current events. The website maintains a strong social media presence and uses modern advertising and analytics technologies to monetize and analyze user engagement. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and multiple ad networks, with a moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and consent management for GDPR compliance but could improve by adding more security headers and updating outdated libraries. The absence of WHOIS data limits domain trust assessment, but the website's branding and content quality indicate a legitimate media outlet. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

L

LATAM Airlines Group S.A.

latam.com

49

LATAM Airlines Group S.A. operates as a leading airline in Chile and South America, offering a comprehensive range of travel services including flight bookings, travel packages, hotel reservations, car rentals, and travel insurance. The website targets travelers primarily in Chile and the broader South American region, providing a seamless digital experience for booking and managing travel. The company maintains a strong market position as a regional leader with a well-established loyalty program, LATAM Pass, enhancing customer retention and engagement. Technically, the website is built on modern web technologies including React with Next.js framework, supported by robust analytics and marketing tools such as Google Analytics, FullStory, Adjust, and Exponea. The site is hosted on a reliable CDN infrastructure (Akamai), ensuring fast performance and excellent mobile optimization. SEO and accessibility practices are well implemented, contributing to a professional and user-friendly experience. From a security perspective, the site enforces HTTPS and employs standard security headers, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a low-risk profile with high professionalism and trustworthiness, though the absence of WHOIS domain registration data slightly reduces confidence in domain legitimacy. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around vulnerability disclosures.

K

Kontrola systémů vytápění

kontrolykotluzlin.cz

42

The website www.kontrolykotluzlin.cz represents a small Czech-based business specializing in heating system inspections and energy compliance services, primarily serving the Zlín region and nearby cities such as Brno and Olomouc. The company offers legally mandated inspections for heating systems with heat sources above 70 kW, including licensed and unlicensed operations, as well as related services like gas and pressure equipment inspections and external energy specialist consulting. The site content is professionally presented in Czech, with clear contact details and official certifications, indicating a legitimate and focused service provider in the energy sector. Technically, the website leverages the AMP framework to ensure fast loading and excellent mobile optimization. It uses JSON-LD structured data to enhance search engine understanding and integrates Google Analytics for visitor tracking. The site is well-structured with good SEO practices and accessibility features, although no CMS or hosting provider details are explicitly identified. The absence of forms reduces attack vectors, and the site appears to use HTTPS, though explicit security headers are not detected in the provided data. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the lack of explicit security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is missing, which is unusual and reduces trustworthiness from a domain registration perspective. Despite this, the presence of official certifications and detailed contact information supports the site's legitimacy. Overall, the website is a well-maintained, professional platform for a niche energy compliance service provider. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve trust and compliance.

H

Hotel International Brno

hotelinternational.cz

53

Hotel International Brno is a well-established hospitality business located in the historic center of Brno, Czech Republic. The hotel offers a range of accommodation options including rooms and suites, complemented by multiple restaurants and bars, event and meeting facilities, and wellness services. The website reflects a professional and customer-focused approach with multilingual support and integrated booking capabilities. The company maintains active social media channels and displays recognized certifications, enhancing its market credibility. Technically, the website employs a modern technology stack including jQuery, Google Maps API, Google Analytics, Facebook Pixel, and a third-party booking widget. It features a cookie consent mechanism compliant with GDPR, uses HTTPS, and integrates reCAPTCHA for security. However, some security headers are not visibly implemented, and WHOIS data is unavailable, which slightly impacts trustworthiness. The security posture is solid with encrypted communications and consent-based tracking, but could be improved by adding explicit security policies and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and user controls. Overall, the website and business present a low risk profile with strong professionalism and digital maturity. The main concern is the lack of WHOIS transparency, which should be investigated to ensure domain legitimacy and ownership clarity.

D

Děkovačka

dekovacka.cz

46

Děkovačka is a Czech-based innovative marketing platform specializing in leveraging e-commerce thank-you pages to create a unique performance marketing channel. The company connects non-competing e-shops to share discount coupons, thereby driving new customer acquisition and expanding email marketing databases. Established around 2021, it has grown to include over 300 e-shops and reaches more than 50,000 potential customers monthly. The website presents a professional and consistent brand image with comprehensive client testimonials and media coverage, reinforcing its market position. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Complianz for GDPR compliance. It uses common JavaScript libraries like jQuery and slick slider for UI components and integrates Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, though explicit security headers and incident response policies are not publicly documented. The absence of WHOIS data limits transparency and slightly impacts trustworthiness, but the overall digital maturity and business credibility remain strong. No WAF or content blocking was detected, allowing full content access and analysis. Privacy compliance is well addressed, with clear policies and consent banners. The site does not contain any adult or questionable content, targeting general audiences in the e-commerce sector. Strategically, Děkovačka should enhance its security posture by implementing recommended HTTP security headers and publishing security and incident response policies. Improving WHOIS transparency or providing verified business registration details would further boost trust. Overall, the platform is well-positioned as a niche marketing solution with a solid technical foundation and compliance awareness.